EXPERTISE

Nathalie is a Partner specialised in Data Protection, Cyber Security & Artificial intelligence in the Commercial Services team at Addleshaw Goddard's London and Paris offices.  She is a well-known and trusted adviser in the global privacy and data protection world, who brings 20 years of experience and extensive knowledge to clients across sectors and jurisdictions. 

Nathalie’s practice encompasses the full range of Data Protection, e-Privacy and Cyber Security issues including global data protection audits and compliance implementation programmes, policies, data processing/ sharing arrangements, vendor management, data protection impact assessments, privacy by design, marketing permissions, data collection and commercial exploitation, data subject rights and the use of new technologies (AI, IoT, ec).

She regularly provides strategic advice in relation to multi-jurisdictional data transfers including on the implementation of the new EU Standard Contractual Clauses (SCCs); the UK Addendum to the EU SCCs, BCRs, intra-group data sharing arrangements as well as in relation to conflicts between different applicable privacy laws (e.g. EU/UKGDPR, CCPA in the US, laws in China, Russia, India, etc.).

Nathalie also advises on cybersecurity matters ranging from data breach response, forensic investigations and remediation, to system infrastructure and network security, the NIS Directive, data governance and security standards.

Having worked at the European Commission in Brussels and the World Bank in Washington DC, she combines strong regulatory expertise with commercially pragmatic solutions when it comes to representing clients subject to investigations or enforcement proceedings before the Information Commissioner in the UK, the CNIL in France, the EU Supervisory Authorities or the EDPB.

Nathalie also regularly advises on a wide range of technology related agreements, EU digital media, commercial contracts and consumer protection issues. 

Her clients are drawn from a wide range of data rich industry sectors, including Technology, Healthcare & Life Sciences, Financial Services, Retail & Consumer, Hospitality & Leisure, Advertising and Marketing, Automotive, , Media and Publishing.

She contributes regularly to newspapers and specialist legal publications, and participates in many industry/sector groups.  She is a regular speaker at international privacy and data security conferences. Nathalie is a dual qualified lawyer in the UK and in France.

Nathalie's recent experience includes advising:

• an international health technology provider on patient information and confidentiality in connection with the roll out of their pharmacy management software in the EU, and assisting with investigations from EU Supervisory Authorities in the context of a data security breach
• a number of global hospitality management and real estate groups on GDPR global audits and compliance programmes, including on vendor management
• a global publisher on strategic data sharing and data transfer agreements, PECR compliance and marketing permissions and contractual data arrangements with business alliance partners
• adtech vendors on transatlantic data privacy issues and in particular compliance with the GDPR and the CCPA in the online advertising ecosystem
• a large multinational gaming operator on its intra group data sharing arrangements as well as Brexit implications
• a UK civil society campaign on ICO regulatory investigations relating to online political advertising campaigns
• a leading European fleet telematics provider on a telematics data sharing agreement
• a large multinational BPO provider on the data aspects of the outsourcing of its claim handling services to jurisdictions outside of the EEA.